CVE-2025-5384: JeeWMS cgAutoListController.do CgAutoListController sql injection
Published May 31, 2025
·Updated
A vulnerability was found in JeeWMS up to 20250504. It has been classified as critical. This affects the function CgAutoListController of the file /cgAutoListController.do?datagrid. The manipulation leads to sql injection. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Affected Software
2 affected components
Jeewms JeeWMS<=20250504
Huayi-tec Jeewms<=2025-05-04
Event History
May 31, 2025
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 20, 57666
Event
via NVD·02:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-5384?
CVE-2025-5384 has been classified as critical.
2
What causes CVE-2025-5384?
CVE-2025-5384 is caused by SQL injection vulnerabilities in the CgAutoListController function.
3
How do I fix CVE-2025-5384?
To fix CVE-2025-5384, update JeeWMS to a version later than 20250504.
4
Can CVE-2025-5384 be exploited remotely?
Yes, CVE-2025-5384 can be exploited remotely.
5
Which software is affected by CVE-2025-5384?
CVE-2025-5384 affects JeeWMS up to version 20250504.